News for hackers. Stuff that matters.

drewfax

Re:OpenCode Hacked: User credentials leaked on Saturday October 17, 2026 @09:07PM (#50136828)
Can someplease explain what is a distillation attack?
> The court noted that recently there have been growing efforts globally to limit internet access for children below a certain age, especially social media platforms, “in the name of their safety”. However, upon “anxious consideration”, the court decided not to endorse the same.

It's relieving to hear this from the Supreme Court, considering the fact that the current Modi government's usual approach to any problem is banning internet access.

Re:OpenCode 2.0 on Thursday October 15, 2026 @08:22AM (#50102625)
They've mentioned "requests / 5 hr" limits for each model, which I presume is max number of requests for that model.
Re:OpenCode 2.0 on Thursday October 15, 2026 @02:23AM (#50099945)
Yeah I am confused by their pricing explanation. All I get is there's some kind of throttling.
> For example, non-Samsung Android OEMs aren't allowed to directly sell devices with GrapheneOS and Google will only permit it within a quota.

Wow, that is so cheap of Google. That company has lost all it's values and deserves to die.

They built their empire with open source projects including Debian, KDE's KHTML (Webkit predecessor), Linux kernel, MySQL etc. But now, these leeches won't even allow OEMs to use different flavor of Android.

Linux kernel introduces bug fixes, new features, and major systemic changes all the time. That’s why using SemVer for Linux is pointless and why Linus dropped it.
Re:Humans Are Reading Your ChatGPT Chats, Lawsuit Claims on Thursday September 24, 2026 @11:04AM (#49831627)
If anyone assumes their AI chats are private, they must be stupid. Of course, all AI companies are going to evaluate chat sessions for improving their models whether it's disclosed in the privacy policy or not. They're investing tonnes of money into this, so your privacy is a negligible problem for them.
Re:GrapheneOS on AI Usage on Wednesday September 09, 2026 @09:32AM (#49626266)
Nothing surprising here. AI is a tool just like an IDE, debugger, etc. All the regular tasks like coding, testing and review still holds true. Developer is still responsible for their work. Reviewer is responsible for ensuring code quality and standards. As long as the submitted code is of high quality and does not violate copyright, AI is not a concern.

It's stupid only when an organization refuses to understand AI is a text prediction software and thinks it can replace humans in coding, testing, reviewing etc.

Re:Actively exploited sandbox RCE in all Chromium versions on Sunday September 06, 2026 @03:01AM (#49583996)
That's how the system or browser should be configured. Secure by default and any insecurity must be an opt-in. But Google won't do it because their websites are JS heavy monster trucks and millions of websites run their tracking scripts which require JIT enabled by default for optimal page load.
That is the point and business of Quad9. It's not their fault for you not knowing what Quad9 is.

I don't want my family to get malware from sketchy websites. Quad9 offers a simple solution for these usecases. I'll take the false positive anyday over unfiltered DNS.

Re:GrapheneOS says Pixel 11 has MTE support after all on Wednesday September 02, 2026 @01:04PM (#49539228)
So other projects are not supposed to critize Google? Graphene's focus is on security and they complain about lack of security in your products. Seems valid to me.

Also security and using non-Google OS are not niche usecases. I'm not sure how you are working on Android, the most popular OS while claiming security is a niche usecase. In fact, I have less confidence in security of your work.

Re:Credit Card Rewards Became a $9.2B Wealth Transfer on Tuesday August 25, 2026 @09:50AM (#49434112)
Credit card usage has been increasing in India.

Source: https://bfsi.economictimes.indiatimes.com/articles/credit-ca...

Besides, NPCI has introduced merchant transaction fee for UPI now causing decline in UPI transactions.

New generations don't 'browse' web anymore. They 'consume' YouTube, Instagram, Android TV and other walled gardens. These generation don't even know they could change contents being displayed on their device to their wish. For them it's just whatever the app shows. They don't understand Web, extensions, DNS etc. I don't have hope for new generations. We're are the old men now yelling at AI and App Stores.
That's why Brave probably built an in-built adblocker written in Rust. Works great on both desktop and mobile.
Now they are doing it to Android with mandatory developer identity verification and Play Integrity. I wonder how those engineers sleep at night.
How would it work? Isn't it easy for the authorities to check the list of users on the device?
Re: on Sunday July 26, 2026 @03:49AM (#49055723)
I suspect this is either some ground work for planting a future backdoor or a noob who found out there's a ~/.cache directory.
Re: on Sunday July 26, 2026 @03:43AM (#49055698)
Is this a joke I don't understand? Aren't Android apps sandboxed? How does these two commands supposed to make my phone fast for 50 years?

rm -rf ~/.cache/* 2>/dev/null

rm -rf /data/data/com.termux/files/usr/tmp/* 2>/dev/null

Source: https://github.com/50YearsPhone/vision-50-years-phone/blob/m...

Re:UPI: Anatomy of a Payment Transaction on Sunday July 12, 2026 @02:19AM (#48878801)
Yes, UPI works. But it's a terrible system for privacy and autonomy. It has so many intermediaries, requires phone number and linked to person's identity. It should not be called a peer-to-peer payment system in anyway. It is controlled by the government rather than Visa or Mastercard. That's the only the difference.
Re:OpenWrt One – Open Hardware Router on Tuesday July 07, 2026 @06:57AM (#48816067)
I too use ASUS RT-AX53U. Decent hardware. But stock firmware was terribly slow. IPv6 didn't even work.

I heard OpenWrt when I searched how to fix the stock firmware. Flashed it and never turned back. Now, OpenWrt is a critical infra in my house for adblocking, DoH, Firewall, Network Segmentation etc. None of these are possible with the stock firmware.

Re:Google Hits 50% IPv6 on Sunday June 21, 2026 @06:17AM (#48617448)
Similar experience. I bought an ASUS router and enabled IPv6. It slowed down everything down. Immediately flashed OpenWrt on it, IPv6 works like charm.

It's usually bad configuration done by the router vendors. It doesn't mean IPv6 is bad.

Re:GrapheneOS has been ported to Android 17 on Tuesday June 16, 2026 @11:26PM (#48565333)
That completely goes against what they're working towards. I understand why you would want to root your own phone, but GOS is targeting highest security standards and root ain't one of them (for good reason).
Re:Leaving Mozilla on Saturday June 13, 2026 @08:20AM (#48516578)
Some things Mozilla could have done correctly:

    - Kept Rust and sold best-in-class tooling like IDEs to enterprises.
    - Polished Firefox OS and distributed apps in their store for a 1% commission.
    - Kept Servo and made the most secure and fast browser that no one else had made.
    - Partnered with OEMs to offer Firefox as the default browser.
Yet the best they could do was pay their CEO for nothing.
Re:Leaving Mozilla on Saturday June 13, 2026 @08:13AM (#48516523)
Firefox OS was a brilliant idea. Imagine cross platform and open apps based on HTML/JavaScript that feel native and polished. 2026 would have been amazing if Mozilla executed it right.
Re:Leaving Mozilla on Saturday June 13, 2026 @08:10AM (#48516507)
Extensions were why Firefox was so popular among those considered 'abnormal.' Chrome just copied the idea. VPNs, Pocket, and sync services are all great features; it's their implementation and execution that is so poor.

All Mozilla (and Firefox) needs is to be run by developers, not the fucking MBAs.

Older »